Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: QS7IS4R4LoN5wXC7LXlbI+54s59KAXuLSfhfmZuR6Ag=
Subject key identifier: F1:83:4E:AC:D7:EC:12:3F:B9:F9:EF:B1:B3:3B:2E:C3:4E:A3:21:35
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 01958C60E0CFBB18F3DFBFC4D780787E3E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0737
Signing time: Wed 12 Mar 2025 22:01:54 +0000
Manifest this update: Wed 12 Mar 2025 22:01:54 +0000
Manifest next update: Thu 13 Mar 2025 22:01:54 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: NnRfl1Ci32HNH0hsAxaeW4M6ilGMp/0CKCSYEIfLJIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:e0:cf:bb:18:f3:df:bf:c4:d7:80:78:7e:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Mar 12 22:01:54 2025 GMT
Not After : Mar 13 22:01:54 2025 GMT
Subject: CN=f1834eacd7ec123fb9f9efb1b33b2ec34ea32135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:23:70:38:e7:e2:13:95:35:88:e6:7f:3d:
8e:63:f7:f8:4d:91:2c:6b:31:04:4e:20:d0:33:0d:
f6:84:23:f9:dd:c5:be:70:c0:6e:57:e7:b8:2e:39:
cd:54:c2:20:69:8f:21:09:ac:1c:c3:b2:c7:b2:71:
d3:a6:2d:b1:5b:00:68:40:4c:dd:df:b7:86:47:55:
5d:9a:70:0f:4f:27:22:af:6b:40:c2:95:4d:88:bf:
f3:4f:42:fe:d6:2e:3a:a7:d0:99:91:d2:4f:7b:fb:
64:4d:0c:28:74:1a:ee:08:a6:18:91:f3:3c:3d:bf:
8b:47:d4:c2:4b:4d:4f:c1:60:cc:82:49:23:cd:12:
d1:42:cf:66:6e:74:1e:13:ff:3f:ce:54:47:04:30:
c9:b0:cb:d1:02:7a:8b:8d:9d:b6:ab:89:8b:57:15:
a0:99:20:ce:9a:0e:4f:90:2c:ab:f8:86:06:ad:c8:
00:ee:c9:30:1d:74:7f:76:5d:05:d2:54:ee:c6:d2:
83:2f:0c:46:b3:30:e6:ba:e1:e0:b9:28:0d:67:ae:
ef:b2:60:b4:af:ca:16:7b:c5:22:e1:22:e6:08:89:
cd:7a:d7:b8:49:fa:08:24:3e:54:a9:fd:c5:f5:4a:
93:37:ab:5f:4b:b2:88:b8:81:4d:d1:c2:75:6f:5a:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:83:4E:AC:D7:EC:12:3F:B9:F9:EF:B1:B3:3B:2E:C3:4E:A3:21:35
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:88:b4:c2:06:71:88:c6:34:a2:c3:71:6e:d1:33:50:9c:e8:
df:26:34:0d:db:b4:bc:89:0f:df:85:41:9a:b5:fe:e6:55:83:
c3:b3:b8:ee:bc:30:4a:ca:83:20:fc:45:8c:68:0a:1d:c8:38:
3c:99:9c:4b:88:70:0e:30:e9:0c:63:2a:3f:60:66:5f:71:36:
d4:47:81:97:64:6c:e0:0e:16:b1:0a:50:79:49:02:44:81:3c:
05:71:6b:08:00:c3:bd:28:59:ba:03:41:8b:70:15:2c:da:1e:
65:73:dc:a3:78:a2:b3:5d:6b:15:f6:55:9c:33:de:99:26:d7:
d7:69:c1:d8:a7:c8:7b:94:8b:75:8e:67:e8:1f:fd:c2:60:9b:
c8:77:7c:1f:94:c6:82:89:7a:e9:6b:f9:36:76:4a:68:ad:0f:
34:82:7c:11:be:46:08:ff:46:1f:30:cf:02:0f:76:b1:26:40:
6d:42:45:d6:c8:a5:c2:6c:d8:3f:ea:8f:de:6f:d9:36:7a:c9:
5d:51:0e:51:fb:6f:fa:31:cd:87:4e:eb:75:12:8e:00:e9:b8:
9a:b3:46:21:82:d5:00:c8:c1:81:05:93:2c:5b:87:59:35:a0:
76:17:d1:f3:41:ad:f4:cf:d3:65:56:cd:97:9a:02:5d:a8:43:
20:d0:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:56 2025 by rpki-client